[Freeipa-users] Re: IPA WebGUI login fails with "Login failed due to an unknown reason"

2022-02-02 Thread code bugs via FreeIPA-users
 [03/Feb/2022:02:00:35.465687122 +0500] - ERR - sidgen_task_thread - [file ipa_sidgen_task.c, line 194]: Sidgen task starts ...[03/Feb/2022:02:00:35.966385266 +0500] - ERR - find_sid_for_ldap_entry - [file ipa_sidgen_common.c, line 522]: Cannot convert Posix ID [1196400016] into an unused

[Freeipa-users] Re: IPA WebGUI login fails with "Login failed due to an unknown reason"

2022-02-02 Thread code bugs via FreeIPA-users
ipa config-mod --enable-sid --add-sids  Maximum username length: 32  Maximum hostname length: 64  Home directory base: /home  Default shell: /bin/sh  Default users group: ipausers  Default e-mail domain: example.com  Search time limit: 2  Search size limit: 100  User search fields:

[Freeipa-users] Re: IPA WebGUI login fails with "Login failed due to an unknown reason"

2022-02-02 Thread code bugs via FreeIPA-users
# ipa config-mod --enable-sid --add-sidsExecutes without error. But User still has no objectclass ipaNTUserAttrs and ipaNTSecurityIdentifier attribute.  From: Alexander BokovoySent: Thursday, February 3, 2022 1:02 AMTo: code bugsCc: FreeIPA users listSubject: Re: [Freeipa-users] Re: IPA WebGUI

[Freeipa-users] Re: IPA WebGUI login fails with "Login failed due to an unknown reason"

2022-02-02 Thread code bugs via FreeIPA-users
addattr=ipanthash=MagicRegen # ipa -e in_server=true user-show mtest --all --raw |grep ipaNTHash   ipaNTHash: some-value > > >> >> >>On Tue, Feb 1, 2022 at 12:17 AM Alexander Bokovoy >>wrote:>> >>>On la, 29 tammi 2022, code bugs via FreeIPA-users wrote:&

[Freeipa-users] Re: IPA WebGUI login fails with "Login failed due to an unknown reason"

2022-02-02 Thread code bugs via FreeIPA-users
t; I guess since freeradius uses ipaNTHash attribute in maschap and in @Dan West solution this attribute was deleted. On Tue, Feb 1, 2022 at 12:17 AM Alexander Bokovoy wrote: > On la, 29 tammi 2022, code bugs via FreeIPA-users wrote: > >Hello, > > > >-IPA WebGUI login fails

[Freeipa-users] Re: IPA WebGUI login fails with "Login failed due to an unknown reason"

2022-01-31 Thread code bugs via FreeIPA-users
Thank you Rob, I am having exactly the same problem. On Tue, Feb 1, 2022 at 12:55 AM Rob Crittenden wrote: > code bugs via FreeIPA-users wrote: > > Thank you for your prompt response. > > here is the out put of /var/log/krb5kdc.log during my login attempt. > [snip] > &

[Freeipa-users] Re: IPA WebGUI login fails with "Login failed due to an unknown reason"

2022-01-31 Thread code bugs via FreeIPA-users
; >There is not much activity log in /var/log/httpd/error_log: > > > >[Tue Feb 01 00:20:59.340501 2022] [wsgi:error] [pid 10150:tid > >139780524480256] [remote 10.2.3.188:49652] ipa: INFO: > >[jsonserver_i18n_messages] UNKNOWN: i18n_messages(version='2.245'): >

[Freeipa-users] Re: IPA WebGUI login fails with "Login failed due to an unknown reason"

2022-01-31 Thread code bugs via FreeIPA-users
more information, Minor (2598844948): TGT has been revoked On Tue, Feb 1, 2022 at 12:17 AM Alexander Bokovoy wrote: > On la, 29 tammi 2022, code bugs via FreeIPA-users wrote: > >Hello, > > > >-IPA WebGUI login fails with "Login failed due to an unknown reason&quo

[Freeipa-users] Fwd: IPA WebGUI login fails with "Login failed due to an unknown reason"

2022-01-31 Thread code bugs via FreeIPA-users
Hello, I am having an issue after upgrading the IPA. details are as follows. -IPA WebGUI login fails with "Login failed due to an unknown reason" -After upgrading IPA, can no longer log into the WebGUI Version/Release/Distribution $ cat /etc/centos-release CentOS Linux release 8.5.2111 $ rpm -q

[Freeipa-users] IPA WebGUI login fails with "Login failed due to an unknown reason"

2022-01-31 Thread code bugs via FreeIPA-users
Hello, -IPA WebGUI login fails with "Login failed due to an unknown reason" -After upgrading IPA, can no longer log into the WebGUI Version/Release/Distribution $ cat /etc/centos-release CentOS Linux release 8.5.2111 $ rpm -q freeipa-server freeipa-client ipa-server ipa-client 389-ds-base pki-ca